PACKET TRANSFER APPARATUS, TRANSFER INFORMATION 
MANAGEMENT METHOD USED THEREFOR AND 
TRANSFER INFORMATION SEARCH METHOD THEREOF 

BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to a packet transfer apparatus , 
a transfer information management method used therefor and a 
transfer information search method thereof, in particular, to 
QoS (Quality of Service) assurance in IP (Internet Protocol) 
packet transfer. 

Description of the Related Art 

Until now, as for IP packet transfer, a Best Effort (BE) 
transfer not assuring a communication transmission zone 
available to a user during congestion of a network is general . 
As for the IP packet transfer assuring the communication 
transmission zone during congestion of the network, however, 
it is discussed how to give QoS assurance thereof when providing 
the QoS having transmission delay, fluctuation, minimum 
guaranteed speed, a peak value and so on as parameters. 

The factors of this QoS technology can be largely divided 
into the three of "Classify" for identifying the flow/class of 
a packet based on packet information, "Policing" for performing 
admission control of the packet identified by the "Classify" 
of the flow, and "Forwarding" for determining how to transfer 
the packet identified by the "Classify." 



The "Classify" is a high-speed search based on a plurality 
of pieces of information (keys) , the "Policing" is a determinant 
of admission control [forced disposal, inflow rate measurement , 
CC (Central Control Equipment) activity ratio measurement and 
soon] , and the "Forwarding" is a cuing algorithm, load-balancing, 
a high-speed alternative and so on. 

As for the above "Classify, " there is a flow identification 
search method in IP packet transfer. This flow identification 
search method uses a memory capable of high-speed search called 
a CAM (Content -Addressable Memory) 12 as shown in FIG. 16. 

A search pattern entry ( hereafter , referred to as the entry) 
that is hit is written to the CAM 12 in advance, and if the IP 
packet arrives, a search process circuit 11 inputs that search 
information to the CAM 12. If the search process circuit 11 
obtains a registration position (address information) of the 
entry that was hit by a search of the CAM 12 with that search 
information , it reads action solution information from the entry 
of the action solution memory 13 based on that registration 
position so as to solve packet action based on that action solution 
information . 

Here, as a source IP address, a destination IP address, 
DSPC, TCP (Transmission Control Protocol ) /UDP (User Datagram 
Protocol) and so on are registered in registration of search 
keys with CAM 12 , the source IP address , a destination IP address , 
DSPC, TCP/UDP and so on are also given as packet search 
information. 

In hardware, the above series of operations solve packet 
transfer information. What is important here is the above 
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registration of search keys with the CAM 12 and a search process 
for the CAM 12. As the CAM 12 is searched from a high order 
entry to adopt a first hit entry according to its limitation 
in the above series of operations, registration order of entries 
5 is very important* Accordingly, if the CAM 12 is to be searched 
once, it is necessary to write the entries of important functions 
as high order entries. 

The current hardware functionally performs two searches 
("a search for a QoS flow entry" and "a search for a routing 
1*1 10 entry" ) in the search process for the CAM 12 , and the registration 
%\ of the search keys is performed by software . A difference between 

8 •■ S 

?Jf the two searches is that "the search for a QoS flow entry" is 

~*\ 

■*J:' to search with a plurality of pieces of key information (the 

source IP address and the destination IP address, for instance) 

$«* 

Ili 15 whereas "the search for a routing entry" is to search only with 
01 the destination IP address. 

Jw* In addition, a functional difference between the two 

searches is that "the search for a QoS flow entry" is intended 
to solve QoS information of a matching packet whereas "the search 
20 for a routing entry" is intended to solve a destination (output 
destination) . 

As for the above-mentioned technology in the past, the CAM 
is used in order to implement a high-speed search in the " Classify" 
and the entries to be registered with the CAM are very important 
25 to the registration order, and another important point is how 
efficiently the process can be executed in updating the entries . 
As for the current entry management, control of the registration 
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order is complicated and limited in many ways, and an efficient 
update method of the entries is not implemented yet. 

While forced disposal (filtering) and inflow rate checks 
(disposal, class change) are currently performed in the 
5 "Policing, " control according to a system state (determination 
of admission control by a CC activity ratio and so on) is not 
performed. In case of considering an IP-Switch for a carrier 
that is seriously influenced by a system down, such a function 
seems to be necessary. 
10 As for the "Forwarding , " it is required to update a plurality 

'St Si? 

1*1 of points in the Forwarding information update process , and there 

pj 

III is a problem in processing ability. In addition, in an action 

G 

4l determination method depending on an application such as output 

line determination , an output line and other actions are directly 

gij 15 determined from the "Classify, " so that it is not a configuration 

it \ 

PI to flexibly support an output line state and the application. 

In addition, while the QoS technology gives an image of 
a matter related to transfer, it is also an important factor 
in reality to collect packet statistical information transferred 
20 by the QoS technology and let a user know exact information on 
whether the QoS that is set is assured. 

That is , in packet filtering wherein it is determined whether 
to permit or deny the packet matching with the entry, there is 
a first problem, as it is the same search as a QoS transfer entry 
25 search, that the setting becomes very complicated or limitation 
arises to the function due to another QoS transfer entry in the 
case where a certain entry is to be permitted. Moreover, there 
is a second problem, as it is a precondition in the en try management 



to register the packet to be transferred without fail, that an 
arbitrary packet accounting function cannot be provided. 

Here, the above problem will be described by referring to 
FIG. 17. In the case of the first problem, if a maintainer is 
to permit a source IP address "10.40.*.*" and abandon a source 
IP address "10.*.*.*, ■ that function can be provided by setting 
a logical image as shown in FIG. 17A. 

However, if it requires a setting of the QoS transfer to 
the packets of the source IP addresses "10.40.22.*" and 
"10.42.68.*," it must be set as shown in FIG. 17B in order to 

keep the above entry function effective. 

In addition , if the setting of abandoning a source IP address 
"10.*.*. * n is deleted thereafter, a rewrite of an entry 

registration position as shown in FIG. 17C arises in order to 

keep each entry effective. 

In case of managing several tens of thousands of entries 

of such cases, increase in update time of entry rewriting is 

caused in addition to complicatedness of management. 

Accordingly, it is difficult in reality to perform the search 

of a filter function and the search of the QoS transfer 

concurrently . 

On the other hand, in the case of the second problem, the 
maintainer can only monitor statistical information of the 
entries currently registered with the CAM when monitoring traffic . 
For instance, in the case where the entries as shown in FIG. 
17D are currently registered, if the maintainer wants to know 
the statistical information of the source IP address "10.40.*.*," 
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the information is available by totaling the counter values added 
to the entries. 

When the entries as shown in FIG. 17E are set in the case 
where the maintainer further wants to know the statistical 
5 information of the source IP address "10.40.22,4," however, 
transfer information must also be set in order to keep the original 
entries effective, even though the entries are only intended 
to give the counter information. 

If the second entry (the entry of the source IP address 
10 "10 . 40 . 22 . *" ) is deleted in this state, the transfer information 
of the first entry only for the purpose of an account must also 
be updated. In the case of several tens of thousands of entries , 



it is very difficult in reality to execute these processes as 

Mil 

* with the above first problem. 

III 

jl 15 SUMMARY OF THE INVENTION 

assy 

M Thus, an object of the present invention is to provide a 

packet transfer apparatus capable of solving the above problems , 
avoiding a competition problem among entries , reduction of entry 
management costs and improvement in entry setting processing 

20 ability, a transfer information management method used therefor 
and a transfer information search method thereof. 

The packet transfer apparatus of the present invention is 
a data transfer apparatus for transferring a packet based on 
transfer information corresponding to one of a plurality of 

25 entries set in a packet search table in advance , andhas a plurality 
of registration tables for having the above described transfer 
information registered by objectives; an address table for having 
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an address of each of the above describedpluralityof registration 
tables registered; and search means for obtaining the above 
described address from the above described address table 
corresponding to amatching entry of the above described plurality 
5 of entries, and obtaining transfer information on each of the 
above described plurality of registration tables based on that 
address . 

The packet transfer information management method of the 
present invention is that of the data transfer apparatus for 
P 10 transferring the packet based on transfer information 
PI corresponding to one of the plurality of entries set in the packet 

hl search table in advance, wherein management is conducted by 

registering the above described transfer information in the 
plurality of registration tables by objectives; and registering 
15 the address of each of the above described plurality of 

registration tables in the address table so as to obtain the 
I** transfer information on each of the above described plurality 

of registration tables based on the address of the above described 
address table corresponding to the matching entry of the above 
20 described plurality of entries. 

The packet transfer information search method of the present 
invention is that of the data transfer apparatus for transferring 
the packet based on the transfer information corresponding to 
one of the plurality of entries set in the packet search table 
25 in advance, and has the steps of obtaining the address 

corresponding to the matching entry of the above described 
plurality of entries from the address table for having the address 
of each of the plurality of registration tables with the above 
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described transfer information registered by objectives; and 
obtaining the transfer information on each of the above described 
plurality of registration tables based on that address. 

That is to say, the packet transfer apparatus of the present 
invention provides a table configuration to be used for packet 
transfer for implementing the packet transfer flexibly 
supporting an application in an IP packet transfer, a management 
method and a usage thereof. 

To be more specific, as for the table configuration of the 
packet transfer of the present invention, it has a configuration 
wherein the addresses of the tables of transfer information 
managed by objectives as search results of an inputted packet 
is obtained so as to indirectly obtain the transfer information . 
Taking such a configuration allows memory reduction by sharing 
inf ormation, a faster transfer information update process , and 
packet transfer flexibly supporting the application. 

In addition, it is possible for the management method and 
the usage of the packet search table of the present invention 
to solve the problem remaining so far that , of the existing entries 
and the entries of different functions to be added from now on, 
only the functions of the entries positioned in high order become 
effective and also to simplify the packet search entry management 
by classifying the entries to be set in the packet search table 
into a plurality of types and executing a packet search process 
on actual receipt of the packet a plurality of times. 

To be more specific, the packet transfer apparatus of the 
present invention provides search entries wherein received 
packets are classified into plurality of types and the search 



processes for the entries are classified by functions, and also 
the transfer information obtained as the search results is divided 
by the objectives so as to share the transfer information by 
indirect referencing. 

The competition problem among the entries is avoided by 
performing the search process independently by the functions, 
so that it becomes possible to reduce entry management costs 
of the maintainer and improve throughput by omitting a competition 
check among the entries in an entry setting process. 

In addition , as a result of dividing the transfer information 
obtained as the search results by the objectives , it is possible, 
when changing the application, to provide it with minimum 
necessary change in changing a transfer process determination 
table by making no change to an application- independent portion 
(cross system portion). 

Moreover, as it is possible, by sharing the transfer 
information obtained as the search results , to handle the update 
of the transfer information by updating one table , the throughput 
is improved . Furthermore , it leads to improvement in reliability 
of a network if considered in collaboration with an alternative 
function. 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a block diagram for showing a configuration of 
a transfer information search division of a packet transfer 
apparatus according to an embodiment of the present invention; 
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FIG. 2 is a conceptual rendering for showing a transfer 
information search process of the packet transfer apparatus 
according to the embodiment of the present invention; 

FIG. 3 is a diagram for showing a configuration of the packet 
search table in FIG. 1; 

FIG . 4 is a diagram for showing a configuration of a transfer 
information address table in FIG. 1; 

FIG. 5 is a diagram for showing a configuration of a policer 
information table in FIG. 1; 

FIG. 6 is a diagram for showing a configuration of an 
application transfer information table in FIG. 1; 

FIG. 7 is a diagram for showing a configuration of an 
in-system common transfer information table in FIG. 1; 

FIG. 8 is a diagram for showing a configuration of an output 
information table in FIG. 1; 

FIG. 9 is a diagram for showing a concrete example of a 
configuration of a CAM of a packet search table in FIG. 1; 

FIG. 10 is a flowchart for showing processing operation 
of a data transfer apparatus according to the embodiment of the 
present invention; 

FIG. 11 is a flowchart for showing processing operation 
of a search process circuit 1 in FIG. 1; 

FIG. 12 is a flowchart for showing the processing operation 
of the search process circuit 1 in FIG. 1; 

FIG. 13 is a flowchart for showing the processing operation 
of the search process circuit 1 in FIG. 1; 

FIG. 14 is a flowchart for showing the processing operation 
of the search process circuit 1 in FIG. 1; 
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FIG. 15 is a flowchart for showing the processing operation 
of the search process circuit 1 in FIG. 1; 

FIG. 16 is a block diagram for showing the configuration 
of the transfer information search division of the packet transfer 
apparatus according to a past example; and 

FIGS . 17A to 17E are diagrams for showing problems of transfer 
information search of the packet transfer apparatus according 
to the past example. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Next, an embodiment of the present invention will be 
described by referring to the drawings . FIG . 1 is a block diagram 
for showing a configuration of a transfer information search 
division of a packet transfer apparatus according to an embodiment 
of the present invention. In FIG. 1, the transfer information 
search division of the packet transfer apparatus is comprised 
of a search process circuit 1 and a packet search table 2. 

The packet search table 2 is comprised of a CAM 
(Content -Addressable Memory) 20, a transfer information address 
table 21 , a policer information table 22 , an application transfer 
information table 23, an in-system common transfer information 
table 24 and an output information table 25. 

If an IP packet is inputted, the search process circuit 
1 performs a search of the packet search table 2 with the CAM 
20 by sending packet search information to the packet search 
table 2. A search pattern entry (hereafter, referred to as the 
entry) that was hit is written to the CAM 20 in advance, and 
a registration position (address information) of the entry that 
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was hit was outputted to the transfer information address table 
21 * The address information of each table in which the transfer 
information is set is obtained from the transfer information 
address table 21, and the transfer information is read from the 
policer information table 22, the application transfer 
information table 23, the in-system common transfer information 
table 24 and the output information table 25 based on that address 
information respectively. 

The packet search table 2 delivers the transfer information 
read from each table to the search process circuit l r and the 
search process circuit 1 outputs the transfer information to 
a packet transfer control division that is not shown, so that 
the inputted IP packet will be transferred according to that 
transfer information. 

FIG. 2 is a conceptual rendering for showing a transfer 
information search process of the packet transfer apparatus 
according to the embodiment of the present invention. In FIG. 
2, the entries of functions A, B and C are registered with the 
CAM 20 of the packet search table 2, and if any of these entries 
is hit , it reads address information from the transfer information 
address table 21 corresponding to the hit entry. 

According to this address information, action information 
#1 to #3 will be read from the policer information table 22, 
the application transfer information table 23 and the in- system 
common transfer information table 24 respectively. Moreover, 
illustration of the output information table 25 is omitted in 
FIG. 2. 



- 13 - 



FIG. 3 is a diagram for showing a configuration of the packet 
search table 2 in FIG. 1. In FIG. 3, the packet search table 
2 has at least a V (valid) bit showing valid/ invalid, a subject 
search frequency and search key information (IN-Line, SA, DA, 
protocol and so on) registered. 

FIG. 4 is a diagram for showing a configuration of the 
transfer information address table 21. In FIG. 4, the transfer 
information address table 21 has a transfer information address 
A comprised at least of abandonment information Al , a CPU line 
A2, V bits A3, A5 and All, a policer information storage address 
A4, application transfer information storage address A6, in-SW 
transfer information storage address A7, a reception counter 
A8 , an average rate violation counter A9 , a peak rate violation 
counter A10 and an output route information address A12 
registered. 

FIG . 5 is a diagram for showing a configuration of the policer 
information table 22 in FIG . 1 . InFIG . 5 , the policer information 
table 22 has policer information B comprised at least of a 
condition Bl, a policer ID1 B2 and policer result violation 
permission/abandonment instruction B3 registered. 

FIG. 6 is a diagram for showing a configuration of the 
application transfer information table 23 in FIG. 1. In FIG. 
6 , the application transfer information table 23 has application 
transfer information C comprised at least of V bit CI , policer 
(rate) no violation action (remark DSCP, push label information 
and so on) C2, policer (average rate) violation action (remark 
DSCP, push label information and so on) C3 and policer (peak 
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rate) violation action (remark DSCP, push label information and 
so on) C4. 

FIG. 7 is a diagram for showing a configuration of the 
in-system common transfer information table 24 in FIG. 1. in 
FIG. 7 , the in-system common transfer information table 24 has 
in-system common transfer information comprised of priority and 
an abandonment class of no rate violation but of average rate 
violation, and peak rate violation registered. 

FIG. 8 is a diagram for showing a configuration of the output 
information table 25 in FIG . 1 . In FIG . 8 , the output information 
table 25 has output information D comprised of a V bit Dl, an 
output line slot D2, an output line port D3 and an output cue 
number D4 registered. 

FIG. 9 is a diagram for showing a concrete example of a 
configuration of the CAM 20 of the packet search table 2 in FIG. 
1, and FIG. 10 is a flowchart for showing processing operation 
of the data transfer apparatus according to the embodiment of 
the present invention, and FIGS. 11 to 15 are the flowcharts 
for showing processing operation of the search process circuit 
1 in FIG. 1. The processing operation of the data transfer 
apparatus according to the embodiment of the present invention 
will be described by referring to FIGS. 1 to 15. 

If an IP packet is inputted (step SI in FIG. 10) , the search 
process circuit 1 performs a search of the CAM 20 of the packet 
search table 2 that is set in advance (step S2 in FIG. 10) . The 
search process circuit 1 obtains the transfer information address 
A of each table in which the transfer information is set from 
the transfer information address table 21 corresponding to the 
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entry that is hit as the search results of the CAM 20 of the 
packet search table 2 (step S3 in FIG. 10). 

The search process circuit 1 obtains thepolicer information 
B from the policer information table 22 (step S4 in FIG. 10) 
based on the obtained address , obtains the application transfer 
information C from the application transfer information table 

23 (step S5 in FIG. 10), obtains the in-system common transfer 
information from the in -system common transfer information table 

24 (step S6 in FIG. 10), and obtains the output information D 
from the output information table 25 (step S7 in FIG. 10) (see 
FIG. 2). The packet transfer control division transfers the 
IP packet according to these pieces of transfer information ( step 
S8 in FIG. 10). 

Next , a management method of the CAM 20 of the packet search 
table 2 will be described by referring to FIG. 9. In case of 
managing the CAM 20 of the packet search table 2, the entries 
to be set in the CAM 20 are divided into fixed entries 3 and 
variable entries 4. 

The f ixedentries 3 are literally the entries that are fixedly 
set on initialization of a system, and their entry types include 
a congestion avoiding entry 31 that is hit on congestion according 
to the congestion level and a default entry 32 that is hit by 
the packet having no match as a result of the search. 

The variable entries 4 means the entries that are set or 
deleted by the maintainer during the operation or the entries 
that are dynamically set or deleted by a routing protocol and 
so on. While the variable entries 4 are divided into global 
entries 40 and VPN (Virtual Private Network) entries (#1 to #n) 
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41-1 to 41-n, no particular attention is paid to that division 
since it is included in the search key information. 

As for the entry types in common with the global entries 
40 and the VPN entries 41-1 to 41-n, there are four types, that 
5 is, account entries 40a, 41a-l to 41a-n, filter entries 40b, 
41b- 1 to 41b-n, QoS (Quality of Service) entries 40c, 41c- 1 to 
41c-n, and routing entries 40d, 41d-l to 41d-n. 

Subsequently, the usage of the packet search table 2 will 
be described. In case of using the packet search table 2, the 

10 search process of four times per packet is performed on the search 
process circuit 1 for the CAM 20 of the packet search table 2 
that is set in advance in the above manner. Search logic on 
the search process circuit 1 is in common with each search process , 
where the entry that is hit first is adopted. Moreover, the 

15 search process frequency by the search process circuit 1 is 
variable according to the set number of entries. To be more 
specific, the search process frequency increases or decreases 
according to increase or decrease in the set number of entries . 
The search process circuit 1 performs a search of the account 

20 entries 40a, 41a-l to 41a-n of the variable entries 4 as a first 
search (step Sll in FIG. 11), and performs a search of the 
congestion avoiding entry 31 of the fixed entries 3 and the filter 
entries 40b, 41b- 1 to 41b-n of the variable entries 4 as a second 
search (step S12 in FIG. 11). 

25 In addition, the search process circuit 1 performs a search 

of the QoS entries 40c, 41c-l to 41c-n of the variable entries 
4 as a third search (step S13 in FIG. 11) , and performs a search 
of the default entry 32 of the fixed entries 3 and the routing 
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entries 40d, 41d-l to 41d-n of the variable entries 4 as a fourth 
search (step S14 in FIG. 11). 

The search by the search process circuit 1 will be described 
further in detail . It performs a search of the received IP packet 
5 for the account entries 40a, 41a- 1 to 41a-n in order to collect 
the statistical information in the first search (step S21 in 
FIG. 12). As the account entries 40a, 41a-l to 41a-n are the 
entries intended to have the statistical information consciously 
! . collected by the user, the process on hitting is only counting 

10 up the counters (step S22 and S23 in FIG. 12). 

H If setting of the account entries 40a, 41a- 1 to 41a-n is 

III 
ui 

5JJ not performed, it becomes a mishit (step S22 in FIG. 12), and 

Gl 

as. 

*W the process moves on to the second search. As a point to keep 

M in mind in this case , the process of counting the number of the 

111 

p 15 packets is executed in all the four searches. Then, the reason 

IP 

f!| for performing the search process only of packet collection in 

& 

the first search is that the search processes of the second time 
and thereafter are intended for admission control or a particular 
transfer process of the packets , where the counting of the number 

20 of the packets is performed accompanying it. 

To be more specific, it is because, when the user wants 
to collect the number of the packets not dependent on the transfer 
process, the packets must be processed as ones uncertain about 
how they are transferred in case of hitting the entry for packet 

25 collection in the same search process as an ordinary packet 
transfer determination process. 

The search process circuit 1 concurrently performs a search 
of the congestion avoiding entry 31 and a search of the filter 
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entries 40b, 41b- 1 to 41b-n (step S31 in FIG. 13). In this second 
search, it is determined whether to transfer or abandon the packet 
received by the admission control based on the above search results 
(step S32 in FIG. 13). 

As the congestion avoiding entry 31 has a higher priority 
than the filter entries 40b, 41b- 1 to 41b-n, they are set area-wise 
in lowering order of the congestion avoiding entry 31 , the filter 
entries40b, 41b-l to41b-n. In addition, although the congestion 
avoiding entry 31 is set in normal (uncongested) times, it is 
rendered "invalid" and is not to be searched for, and so only 
a search of the filter entries 40b, 41b-l to 41b-n is performed. 
On the congestion, the entries corresponding to the congestion 
level are set to be "valid, " and the congestion avoiding entry 
31 is also searched for. 

In the case where it is abandoned as a result of the search 
( step S33 in FIG . 13 ) , the searchs for the third time and thereafter 
become invalid and are abandoned (step S35 in FIG. 13). And 
in the case where the transfer is permitted (step S33 in FIG. 
13), the packet is transferred according to the search results 
of the third time and thereafter. Inthiscase, any packet hitting 
the entry is automatically counted as the number of the packets 
(step S34 in FIG. 13) . 

The search process circuit 1 performs a search of the QoS 
entries 40c, 41c-l to 41c-n in the third search (step S41 to 
S43 in FIG. 14), and obtains the transfer information on the 
packets given a higher priority than the BE ( Best Effort ) transfer 
(step S42 and S43 in FIG. 14). 
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The transfer information includes the above-mentioned 
policer information B, application transfer information C, 
in- system common transfer information and output information 
D, and in the case where the transfer information is unset 
(invalid), the transfer information determined by the fourth 
routing entries 40d, 41d-l to 41d-n is adopted. 

The search process circuit 1 performs a search of the routing 
entries 40d, 41d-l to 41d-n in the fourth search (step S51 in 
FIG. 15) , and obtains the transfer information on the BE transfer 
packet (step S52 in FIG. 15). 

In this case, the same transfer information as that of the 
third search of the QoS entries 40c, 41c-l to 41c-n is obtained, 
and the information obtained in the third search is given a 
priority. As the transfer information setting is finally 
determined in transfer operation by this search, all except the 
policer information B is essential. Moreover, when making a 
search of the account entries 40a, 41a-l to 41a-n, the filter 
entries 40b, 41b-l to 41b-n, the QoS entries 40c, 41c~l to 41c-n, 
and the routing entries 40d, 41d-l to 41d-nof the variable entries 
4, a search of the VPN entries 41-1 to 41-n is performed by 
specifying the VPN entries 41-1 to 41-n based on the information 
specifying one of the VPN entries 41-1 to 41-n added to the search 
key information. 

Thus, the competition problem among the entries can be 
avoided by providing the search entries wherein the received 
packets are classified into a plurality of types and performing 
the search process independently by the functions, so that it 
becomes possible to reduce entry management costs of the 
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maintainer and improve throughput by omitting a competition check 
among the entries in an entry setting process. 

In case of dividing the above search process by the functions , 
" extraction of the functions " must be performed as a precondition . 
5 As this is different depending on implementation of the system, 
this embodiment largely classifies the functions into a "packet 
account," a "packet filter" and a "QoS assurance flow search." 

As for the packet account, the information as the search 
result does not exist, and it only counts up the counters. As 

'■L 10 for the packet filter, it determines whether the packet is 

U 
#»* 

J;I acceptable or unacceptable as the search results, and it is 

W. forcedly abandoned if unacceptable. As for the QoS assurance 

III • 

Cl flow search, the information on the QoS transfer such as a subject 

« policing solution, a transfer priorities, abandonment 

ill 15 priorities and so on can be obtained as the search results. 

C) 

ffl An independent search per function is performed in the above 

C? 

m search process, and its search order does not matter basically. 

In addition , all the search results can be independently obtained 
by independently performing these searches . There are pieces 

20 of information not holding concurrently obtained from the 

plurality of functions , which can be solved by giving priorities 
to the information in advance. In the above example, in the 
case where the search results that it is unacceptable is obtained 
from the packet filter and the information on transfer priorities 

25 and so on is obtained in the "QoS assurance flow search," the 
applicable flow is determined to be "unacceptable" so that the 
results such as the transfer priorities and so on are ignored. 
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On the other hand, entry competition means that an entry 
A of a certain function is related to the contents ( specifically, 
contents of the search key) of an entry B of another function 
and one search hits only one entry so that any one of the entries 
is not hit and its function becomes invalid- If the entries 
A and B are completely independent, this problem of the entry 
competition does not arise as a result of the search on arrival 
of the packet since it will not match with both. 

However, there is a possibility that the packet having 
arrived will match both the entries A and B in the case where 
the entries A and B are related (such as when one of them is 
including the other). In this case, as one search hits only 
one of them, the other entry and its search results become invalid . 

As opposed to this, in case of obtaining the search results 
of each function, it can be solved by hitting both entries A 
and B, not depending on the relation between them. That is, 
as one search hits one entry, the applicable entry of each function 
is hit and the search results thereof can be obtained by performing 
the search per function so that the above problem of the 
competition between the entries is solved. 

In addition , as a result of dividing the transfer information 
obtained as the search results by the objectives , it is possible, 
at the time of changing the application , to provide it with minimum 
necessary change in changing a transfer process determination 
table by making no change to an application-independent portion 
(system common portion). 

Furthermore, as it is possible, by sharing the transfer 
information obtained as the search results by indirect 



- 22 - 



referencing, to handle the update of the transfer information 
by updating one table , the throughput is improved . Furthermore , 
it leads to improvement in reliability of the network if considered 
in collaboration with an alternative function. 

In this case, if attention is paid to an "output line number" 
in the information obtained as the search results , it is possible , 
in the case where the line of the line number #1 cannot be used 
due to a wire obstacle and so on and if line information is shared 
by address reference, to make the wire obstacle known to all 
the entries referring to the line information by updating only 
the sharing table of that line information. 

As opposed to this, in the case of a system of directly 
obtaining the "output line number" without sharing the 
information, it is necessary to update the search results for 
all the applicable entries using the line number #1. It is 
difficult to simply determine selection of this information to 
be shared here since it depends on implementation of the system, 
at least sharing the above "output line number" and so on will 
lead to reduction of memory and improvement in search results 
updating ability. 

Moreover, while the transfer of the IP packet is mentioned 
in this embodiment , it is applicable to transfer of any packet 
other than the IP packet by setting layer 2 information, MPLS 
(Multi-Protocol Label Switching) label information and so on 
on the search key. In case of providing the VPN by MPLS, it 
is necessary to perform a search by including also the second 
label in the search key. 
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As described above, according to the present invention, 
the data transfer apparatus for transferring the packet based 
on the transfer information corresponding to one of a plurality 
of entries set in the packet search table in advance has a plurality 
of the registration tables for having the transfer information 
registered by ob jectives , the address table for having the address 
of each of the plurality of registration tables registered, and 
obtains the transfer information on each of the plurality of 
registration tables based on the address obtained from the address 
table corresponding to the matching entry of the above described 
plurality of entries so as to have the effects of avoiding the 
competition problem among the entries, reducing the entry 
management costs and improving the entry setting processing 
ability. 



